Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

TCPDUMP Capture

9 views
Skip to first unread message

Paul N.

unread,
Mar 28, 2014, 4:25:14 PM3/28/14
to
Hi,

Obtained a capture with TCPWare's tcpdump utility, using syntax:

$ tcpdump -s 1600 -w capfile.cap <expr>

but apps such as Wireshark and Network Monitor are unable to parse the
packets (they can read the file and can see the hex bytes, but do not
parse the packets into fields).

Also tried:

$ netcu tcpdump /write=capfile.cap /snap=1600 <expr>

The tcpdump utility provided in Multinet and TCP/IP Services for OpenVMS are unable to read the file with:

$ tcpdump -r capfile.cap


Any ideas/tricks?

Thanks,

Paul


0 new messages